CVE-2012-5901

CVE-2012-5901 describes an insufficient access control vulnerability in DFLabs PTK 1.0.5, allowing remote attackers to read sensitive data files. Specifically, the software stores log, image, and report files with predictable names directly under the web root, making them accessible via direct requests. This vulnerability has a CVSS score of 5.0, indicating a medium severity, as it can be exploited remotely with low complexity to achieve partial confidentiality impact without authentication. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage for this CVE.